Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

SmarterTools SmarterMail Unauthenticated Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in SmarterTools SmarterMail versions prior to build 9511. This vulnerability exists in the ConnectToHub API method, where an attacker can direct the application to a malicious HTTP server that delivers harmful OS commands. These commands are then executed by the vulnerable application.

Impact

Exploitation of this vulnerability allows for unauthenticated remote code execution on the server where SmarterMail is running.

Remediation

Users are advised to update SmarterMail to version 9511 or later, where this vulnerability has been fixed.

Added: Jan 23, 2026, 5:25 PM
Updated: Feb 5, 2026, 8:32 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
10.0
exploitability
10.0
remediation
7.7
relevance
2.2
threat
9.6
urgency
2.9
incentive
8.3

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.